2 matches found
QPDF Command Injection Vulnerability
QPDF is a software application. A C++ library and a set of programs to inspect and manipulate the structure of PDF files. A security vulnerability exists in all versions of QPDF, which stems from the inability of the encrypt method to filter parameters, resulting in a command injection...
9.8CVSS7.5AI score0.02079EPSS
SaveExploits1References3
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...
4.3CVSS6.2AI score0.04509EPSS
SaveExploits2References5Affected Software1
20